$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json) Hash identifier: +x0QTZRC+WZNwTZg7vcjMkPqV3c3IAF8Jm8Se2EYTMg= Subject key identifier: A5:70:82:6D:0B:5F:27:60:93:6C:AB:11:F4:8B:BE:0F:7D:FB:2F:D4 Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft Manifest number: 21 Signing time: Fri 25 Apr 2025 06:51:51 +0000 Manifest this update: Fri 25 Apr 2025 06:51:50 +0000 Manifest next update: Fri 02 May 2025 06:51:50 +0000 Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: TgnmoWkwH29hgTgg6vJ0Y01aVleKca+YbQyu09/RfW8=) 2: C1530A161F4B11F09001E120C4F9AE02.roa (hash: cSk4cXTnBJuFtAnBfK89VOjX9+KoqSl+ebdlMH2Co98=) 3: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Validity Not Before: Apr 25 06:51:50 2025 GMT Not After : May 2 06:51:50 2025 GMT Subject: CN=680b3106-55d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:c8:b3:b2:21:10:30:ac:30:ef:16:93:0f: 1e:05:64:83:bf:94:87:e5:68:7e:9f:ba:ef:41:d9: cb:f2:aa:a9:9c:ad:1e:a4:bc:3e:a3:56:29:50:96: 5a:c3:64:85:7e:c5:78:fe:c4:8e:61:90:24:04:c5: ed:f9:f1:1b:6a:10:2e:99:8a:99:45:a2:71:72:c3: c9:6a:b7:7c:bd:b6:06:fe:89:2d:56:ba:30:68:48: af:02:af:c8:f7:ac:16:31:76:18:2f:2f:da:2e:cb: d8:66:0a:7d:8e:38:f9:7a:46:7b:c2:3c:94:46:0a: ae:99:b9:f8:48:ea:8e:18:7c:1f:53:e8:95:10:bc: 1a:0f:8e:e6:c2:12:f3:d7:cf:86:80:4b:64:f3:0b: 61:51:3f:2f:89:24:fc:13:25:33:d9:99:bd:ce:7c: 17:98:ef:9f:4b:5e:d5:dd:d4:60:39:0c:52:ec:06: ed:2d:0d:56:09:6f:3a:fb:e2:98:e6:0c:b1:8a:cc: 7b:cf:55:09:7e:c9:18:56:af:50:ea:6f:c8:ae:f6: fe:c1:ad:0f:b1:4f:c4:4d:d1:63:1e:55:88:4d:39: 48:cc:63:2d:cd:ae:3f:28:7b:79:25:83:fc:d7:b9: 10:a0:96:c9:a0:2d:6b:6c:30:ea:47:9a:bb:b3:1b: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:82:6D:0B:5F:27:60:93:6C:AB:11:F4:8B:BE:0F:7D:FB:2F:D4 X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:36:8f:66:7b:b9:ef:f4:b8:8b:34:dc:69:11:c3:0b:71:0d: 85:3b:93:62:08:f2:98:5e:c6:46:71:1d:6c:db:5f:ba:1b:c4: 6d:bb:17:e1:68:f3:4f:8d:21:9f:65:bb:a2:24:6d:a8:d6:48: fd:fc:43:2c:a5:fa:e7:8e:d3:a0:a7:4c:5d:c9:12:5b:00:36: ae:6f:27:75:bf:7f:ec:7a:d4:52:af:a0:c2:61:e5:b9:75:49: f1:61:7c:f2:6f:50:50:ba:98:e2:3a:b9:02:d5:ff:02:1f:fd: 45:ce:2e:21:09:40:3a:c9:fc:25:b3:d1:92:56:53:49:14:16: 76:fa:27:a6:ed:82:ce:bf:33:29:9a:89:c1:45:9b:69:ee:eb: 1d:1b:59:92:55:0d:7b:c5:01:61:08:b5:e4:98:d3:e6:c9:9c: 1a:8d:78:1e:f8:79:91:35:c0:6c:fd:92:9b:9d:b5:fd:29:ba: f2:5d:6c:27:55:fa:de:0e:ec:d1:3f:d6:75:cc:3a:b5:00:58: 96:5f:94:b0:be:00:a1:23:74:55:62:4c:48:ab:91:64:e7:f3: 99:51:13:4d:07:3f:b6:7a:95:10:e6:e6:97:52:79:f4:62:57: 3b:4a:11:51:fa:aa:5d:f3:cd:bc:b8:b5:f5:dd:11:36:17:f4: 8f:8a:a8:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNCNjExMC8GA1UEBRMoRTQ2QjkzMTg1ODVBQzFFMDZDRjM4NEUyRUVDQzIxRjQ3 NDMzODlCQjAeFw0yNTA0MjUwNjUxNTBaFw0yNTA1MDIwNjUxNTBaMBgxFjAUBgNV BAMTDTY4MGIzMTA2LTU1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCts8izsiEQMKww7xaTDx4FZIO/lIflaH6fuu9B2cvyqqmcrR6kvD6jVilQllrD ZIV+xXj+xI5hkCQExe358RtqEC6ZiplFonFyw8lqt3y9tgb+iS1WujBoSK8Cr8j3 rBYxdhgvL9ouy9hmCn2OOPl6RnvCPJRGCq6ZufhI6o4YfB9T6JUQvBoPjubCEvPX z4aAS2TzC2FRPy+JJPwTJTPZmb3OfBeY759LXtXd1GA5DFLsBu0tDVYJbzr74pjm DLGKzHvPVQl+yRhWr1Dqb8iu9v7BrQ+xT8RN0WMeVYhNOUjMYy3Nrj8oe3klg/zX uRCglsmgLWtsMOpHmruzGyeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpXCCbQtf J2CTbKsR9Iu+D337L9QwHwYDVR0jBBgwFoAU5GuTGFhaweBs84Ti7swh9HQzibsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0I2L0U4RjE4QjIyRjcz RTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemli cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd1VEdGaGF3ZUJzODRUaTdzd2g5SFF6aWJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0I2L0U4RjE4QjIyRjczRTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VC czg0VGk3c3doOUhRemlicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABs2j2Z7ue/0uIs03GkRwwtxDYU7k2II8phexkZxHWzbX7obxG27F+Fo 80+NIZ9lu6IkbajWSP38Qyyl+ueO06CnTF3JElsANq5vJ3W/f+x61FKvoMJh5bl1 SfFhfPJvUFC6mOI6uQLV/wIf/UXOLiEJQDrJ/CWz0ZJWU0kUFnb6J6btgs6/Myma icFFm2nu6x0bWZJVDXvFAWEIteSY0+bJnBqNeB74eZE1wGz9kpudtf0puvJdbCdV +t4O7NE/1nXMOrUAWJZflLC+AKEjdFViTEirkWTn85lRE00HP7Z6lRDm5pdSefRi VztKEVH6ql3zzby4tfXdETYX9I+KqMc= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:50 2025 by rpki-client